atmos-starlark

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The dependencies.tools function downloads and installs binaries from external repositories. The config.load function supports fetching JSON schemas from HTTPS URLs.
  • [COMMAND_EXECUTION]: The skill provides extensive APIs for shell command and Atmos CLI execution, including exec.run, component.exec, and atmos.* wrappers.
  • [DYNAMIC_EXECUTION]: The Starlark load() and module.load() functions allow for dynamic loading and execution of Starlark code from the file system.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: Ingests data from ctx.flags, ctx.arguments, ctx.args, environment variables (env), and resolved component configurations via components.get.
  • Boundary markers: No automated boundary markers are provided for input data.
  • Capability inventory: Includes execution of shell commands (exec.run), Atmos commands (atmos.*), file writes (fs.write_file), and tool installations (dependencies.tools).
  • Sanitization: No automatic sanitization is applied to input data; the documentation recommends using structured inputs over manual string templating.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 07:24 AM